first commit

config/wordpress.conf

@@ -0,0 +1,27 @@
+# WordPress: allow TinyMCE
+location = /wp-includes/js/tinymce/wp-tinymce.php {
+    include config/php_fastcgi.conf;
+}
+
+# WordPress: deny wp-content, wp-includes php files
+location ~* ^/(?:wp-content|wp-includes)/.*\.php$ {
+    deny all;
+}
+
+# WordPress: deny wp-content/uploads nasty stuff
+location ~* ^/wp-content/uploads/.*\.(?:s?html?|php|js|swf)$ {
+    deny all;
+}
+
+# WordPress: SEO plugin
+location ~* ^/wp-content/plugins/wordpress-seo(?:-premium)?/css/main-sitemap\.xsl$ {}
+
+# WordPress: deny wp-content/plugins (except earlier rules)
+location ~ ^/wp-content/plugins {
+    deny all;
+}
+
+# WordPress: deny general stuff
+location ~* ^/(?:xmlrpc\.php|wp-links-opml\.php|wp-config\.php|wp-config-sample\.php|wp-comments-post\.php|readme\.html|license\.txt)$ {
+    deny all;
+}